Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
File: AS6079.roa (raw, json)
Hash identifier: voqE1/QpimqEB2Ad10AQNK20wYXHW8W3EKXCbzk4OP4=
Subject key identifier: D8:3A:AC:9C:C2:4B:73:7A:74:90:3B:91:A5:EC:2C:47:77:84:F5:39
Certificate issuer: /CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Certificate serial: 23B8F7EC65E342C0432F25E99D2C35ED86BAA446
Authority key identifier: 88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
Signing time: Sun 28 Jun 2026 00:04:29 +0000
ROA not before: Sat 27 Jun 2026 23:59:29 +0000
ROA not after: Sun 27 Jun 2027 00:04:29 +0000
asID: 6079
IP address blocks: 143.20.186.0/24 maxlen: 24
143.20.198.0/24 maxlen: 24
143.20.211.0/24 maxlen: 24
143.20.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:40:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:b8:f7:ec:65:e3:42:c0:43:2f:25:e9:9d:2c:35:ed:86:ba:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88c14ec02adbf083138eddd47871176ddeb93d9d
Validity
Not Before: Jun 27 23:59:29 2026 GMT
Not After : Jun 27 00:04:29 2027 GMT
Subject: CN=D83AAC9CC24B737A74903B91A5EC2C477784F539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3f:c6:57:54:ba:37:16:37:0c:52:6a:c9:38:
7b:1f:7b:6c:1d:2e:17:f1:6d:15:87:a4:18:ef:0a:
82:16:8d:57:aa:b9:a7:d8:1a:16:5b:94:5d:cd:cd:
ae:0d:af:1c:ef:4f:6b:1f:29:c3:5d:06:b2:58:88:
57:c9:ab:14:da:ca:00:d7:b3:53:77:ad:ec:a7:76:
04:9d:42:39:cf:50:9e:83:b8:71:40:e7:b7:f2:cf:
6d:20:4a:54:b1:00:8e:10:1d:74:69:bb:ef:5c:24:
42:89:a8:6a:01:5b:aa:45:39:a2:9b:cc:b3:f3:2b:
9c:61:c2:ea:7f:23:aa:41:98:1f:85:43:bb:c2:db:
c8:2b:92:97:7e:01:85:02:06:de:b6:ce:bc:f0:00:
fe:08:55:75:46:21:d0:0e:d8:ce:58:42:c4:63:d9:
ac:db:53:1a:1b:36:1d:cd:bf:e6:f8:8e:0c:93:f1:
61:4a:81:7d:a5:aa:fc:f1:8c:f0:03:65:72:91:db:
d3:11:6e:10:f3:6b:61:f6:05:5b:9d:1b:1c:4e:30:
4e:e0:61:97:94:85:89:79:ec:8b:5a:7b:ef:ac:96:
a1:c8:43:14:4b:3d:90:33:f7:d8:6d:3f:64:d9:16:
84:5e:70:38:79:4d:25:3a:a2:91:72:b7:ef:d2:88:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3A:AC:9C:C2:4B:73:7A:74:90:3B:91:A5:EC:2C:47:77:84:F5:39
X509v3 Authority Key Identifier:
keyid:88:C1:4E:C0:2A:DB:F0:83:13:8E:DD:D4:78:71:17:6D:DE:B9:3D:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/88C14EC02ADBF083138EDDD47871176DDEB93D9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iMFOwCrb8IMTjt3UeHEXbd65PZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c409d7b2-ee64-49f1-ad81-8e4a107d62e0/0/AS6079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.20.186.0/24
143.20.198.0/24
143.20.211.0/24
143.20.232.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f7:cb:2f:c5:a5:e5:e8:f6:e3:75:41:c4:ed:4c:d7:0f:25:
5c:99:c7:eb:8c:28:7c:37:64:fb:b3:50:fe:90:0e:c4:35:9a:
4e:34:99:5a:9d:67:b3:c0:10:9b:8d:2c:eb:fa:b9:8b:d4:5a:
41:e0:aa:cd:62:97:06:0b:c5:0b:e1:ea:a1:c2:42:6b:73:c4:
0e:ca:03:cf:54:cd:05:d4:a6:8e:cc:40:42:cf:94:88:e7:5d:
35:41:b5:f6:be:e0:09:23:b4:81:35:e4:84:13:79:01:6a:fc:
4d:e0:ed:70:06:4c:79:46:12:13:aa:a8:d9:23:ba:b4:d1:0c:
3f:95:a4:99:b8:cd:19:71:e7:7d:38:5e:ee:81:50:8e:d9:c0:
06:e6:b9:f8:70:1d:f1:2f:0f:84:9a:99:c6:23:74:7a:d6:8a:
d7:64:23:e6:42:f0:7a:ac:0b:ec:c5:9c:f6:e8:3e:bf:d1:c2:
a6:1e:5e:65:12:36:46:6e:ab:f9:6b:b7:42:0a:46:a1:bd:db:
33:45:12:f6:b4:59:80:e2:3c:37:8f:44:6b:4d:dc:1d:ec:f4:
76:15:84:9d:03:f0:d0:9f:b4:6f:d0:3b:1e:fa:d2:49:6c:6e:
32:79:32:73:50:a0:6f:4f:23:97:eb:71:cf:61:55:e8:9c:c9:
be:48:3f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:08 2026 by rpki-client